PHILADELPHIA (WPVI) — Some of SEPTA’s real-time tracking tools are offline Thursday morning.
SEPTA officials say it is in response to federal cybersecurity recommendations. This comes amid an urgent PHP update due to security vulnerabilities that could allow hackers to gain access to systems through the internet.
RELATED: Urgent security fix issued for code vital to estimated 70% of all websites
The tools impacted include real-time travel information and alerts normally available on the SEPTA app, social media channels, and septa.org.
While those services are temporarily down, officials say real-time bus and Metro information is currently available through Google Maps and the Transit App.
Real-time information about Regional Rail schedules can be found at station monitors and through announcements, according to SEPTA officials.
SEPTA’s customer service line will open at 7 a.m. on Thursday to help support riders. Customers can call 215-580-7800 for assistance.
The transit agency says it is installing security patches.
PHP users were told to immediately install security updates or temporarily take affected services offline until they can be secured. This advice followed the discovery of a new cybersecurity vulnerability that affects PHP.
The PHP programming language is used by many government agencies across the world, and as a result many government websites globally have similarly removed online services and websites.
SEPTA says certain website functions, including the real-time transit information and the senior fare card registration site, as well as the employee intranet, use PHP.
Transit officials say they are repairing these to safely restore their functionality.
“We will share updates as soon as they are available,” SEPTA says.
Copyright © 2026 WPVI-TV. All Rights Reserved.